Nicolas has just applied the patch for Cauldron! Remains Mageia 9 to do.

Assignee: bugsquad => pkg-bugs

For Cauldron, I asked for a freeze move.


Suggested advisory:
========================

The updated packages fix a security vulnerability:

telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether the buffer is full. (CVE-2026-32746)

References:
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/X5ABJVGBTZGH3FCDZEF3XQAMMJVC5AWA/
========================

Updated packages in core/updates_testing:
========================
krb5-appl-clients-1.0.3-16.1.mga9
krb5-appl-servers-1.0.3-16.1.mga9

from SRPM:
krb5-appl-1.0.3-16.1.mga9.src.rpm

Source RPM: krb5-appl-1.0.3-18.mga10.src.rpm, krb5-appl-1.0.3-16.mga9.src.rpm => krb5-appl-1.0.3-16.mga9.src.rpm
Assignee: pkg-bugs => qa-bugs
Whiteboard: MGA9TOO => (none)
Version: Cauldron => 9
Status comment: Patch available from openSUSE => (none)
Flags: affects_mga9+ => (none)
Status: NEW => ASSIGNED

No installation issues.

In Bug 30918 these packages were validated after verifying that telnet and ftp were working. Using examples found on the Internet, I have verified that these are indeed still working after the updates.

Giving this an OK, and validating.

Flags: (none) => test_passed_mga9_64+
Whiteboard: (none) => MGA9-64-OK
Keywords: (none) => validated_update
CC: (none) => andrewsfarm, sysadmin-bugs

An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2026-0122.html

Resolution: (none) => FIXED
Status: ASSIGNED => RESOLVED